Let's Debug

Test result for xn--gfrr-7qa.li using dns-01

A fatal issue occurred during the DNS lookup process for xn--gfrr-7qa.li/CAA.
DNS response for xn--gfrr-7qa.li had fatal DNSSEC issues: validation failure <xn--gfrr-7qa.li. CAA IN>: No DNSKEY record from 94.230.210.84 for key xn--gfrr-7qa.li. while building chain of trust
An error occurred while attempting to lookup the TXT record on _acme-challenge.xn--gfrr-7qa.li . Any resolver errors that the Let's Encrypt CA encounters on this record will cause certificate issuance to fail.
DNS response for _acme-challenge.xn--gfrr-7qa.li had fatal DNSSEC issues: validation failure <_acme-challenge.xn--gfrr-7qa.li. TXT IN>: No DNSKEY record from 94.230.210.84 for key xn--gfrr-7qa.li. while building chain of trust

Submitted Dec 30 00:48:58 2018. Sat in queue for 2ms. Completed in 7s. Show verbose information.